model runner vulnerabilities and fixes

Recent CVEs affecting model runner, with upgrade or downgrade steps. 1 tracked.

Also searched as: modelrunner.

model runner has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-04-01. Highest priority: CVE-2026-33990 (score 46/100).

• CVE-2026-33990 CRITICAL 9.1 UPGRADE Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker

FAQ

How do I fix model runner vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is model runner being exploited right now?

None of the tracked model runner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which model runner CVE should I patch first?

CVE-2026-33990 currently ranks highest (46/100): Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.

← Back to latest CVEs